b6 -2 


t 


RMD) (FBI) _ 






0, 


& 


From: 

Sent: 

To: 

Cc: 


Subject: 


__J(OS) (FBI) 

Friday Ffihrnarv OS 2010 11:50 AM 


b6 -2 


tELtCH, J 
WlFBIlt 


USRW 


IRM D) (FBU 

~Kcom:l 


FW: Pre-pub book 


K oSWFBDf 

IFDHFBI) 


3qsi 


(OGC)(FBI); 


SERSfriVE BUT UNCLASSIFIED 
NON-RECORD 


]with reference to the 


Plea se see the email below from STAO's Legal Counsel_ 

book l | Jon Ellch is trying to get reviewed by the FBI and then published. Per the 

direction of my Unit Chief and our Legal Counsel it has been determined that we are not qualified to 
review the book for classified or proprietary information and believe your division is the cor rect plac e 
for this to occur. Please let me know if you need anything additional from either myself (the | I on 
Jon Ellch's contract) or anyone from my office where Jon is employed. 

Thanks- 


b6 -2 


b6 -2 


From: 

Sent: 

To: 

Cc: 

Subject: 


(OGC)(FBI) 

i nursaav. heoruarv U4. join 4-55 PM 


RE: Pre-pub book 


JOS) (FBI)} 


( i 

josi 


IEBI1 


SEMSfflVE BUT UNCLASSIFIED 
NON-RECORD 


](os) (FBI)£ 


los) (FBI) 


b6 -2 


b6 -2 


This is not an area that T am familiar with hnwsvCT T was ahlp tr» find a "Prp.rmhlir.atirm Review Manual" from 

2005 on FBINet_[vhich seems pretty b7E -4 

thorough. I note that I did not see anything in there about POC of the contract (not exactly sure who that is) 
reviewing the proposed publication "for classified, proprietary information or such information." 


I note the following language, however; 


2. RMD Processes Review Request 

RMD will conduct the prepublication review, answer questions from employees about the 
prepublication review process, and review and process all requests as follows: 

2.1.1. If RMD concludes that no review is required, it will inform the employee in 
writing. 

2.1.2. If RMD concludes that review is required, it will conduct the review. 

2.1.3. RMD may consult or coordinate with any person who can assist in determining 
how to proceed with the prepublication review process. This may include 

seeking help to assess the content or potential impact of the proposed disclosure 
or to initiate appropriate responses to the proposed disclosure. 

Example: RMD may provide a copy of a proposed disclosure to FBI employees with 

l 
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specialized knowledge in order to assess whether the disclosure contains classified 
information. 

2.1.4. RMD may apprise appropriate FBI management officials of impending 


I am not qualified to make a determination of whether material is classified, proprietary or such information. I 
think that a subject matter expert in the technical field and a classification expert need to address those issues, 
see the example in the Manual in the above quoted section. 


I think that there needs to be further discussion witl[ 
for classified or proprietary information. 


b6 

to clarify who is qualified to review the book 


-2 


I hope this helps. Please let me know if you have any additional questions. 

-1 b6 -2 


From: 

Sent: 

To: 

Cc: 

Subject: 


1_l(OS) (FBI) 

Fridav. January 29. 201C 

11:44 AM 
cnarv frh 

) 

_ P 

sj (FBI)I 


FW: Pre-pub book 


OS) (FBI)[ 


(OS) (FBI) 


jggNSfiWE BUT UNCLASSIFIED 
NON-RECORD 


b6 -2 


_| b6 -2 

Please read the email below. Can you provide assistance to Mr. Ellch with reference to his book? 

Thanks- 

_ b6 -2 


From: I fo s) (FBI) 

Sent: Friday. January 29. 2010 11:37 AM 

To: I I QS) (FBI) 

Subject: RE: Pre-pub book 

SENSfftffE BUT UNCLASSIFIED 
NON-RECORD 


Yes, please refer this t<£ 


as you should not know the legal issues with regards to this. 


Thank you 


b6 -2 


From: I l (OS') (FBI) 

Sent: Friday. Januaiv 29. 20 10 11:34 AM 

To: I . □ (OS) (EEL - - .-. 

Cc: ELLCH, JON pj f(CON)J |(OS) (FBI)j |(OS) (FBI) 

Subject: FW: Pre-pub bocT 

» 

'' SENSfflVE BUT UNCLASSIFIED 
^NON-RECORD 


b6 -2 


b6 -2 
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# .& 

Please read the email below. Do we have a classification authority (here at STAO) that could do this? I don't think this is 
something I have bee n trained nor should be expected to know how to do. 

Do you think j l (our attorney/advisor) could do it or possibly someone else? 

Please let me know. 

Thanks-, 


b6 -2 


b6 -2 


From: ELLCH, JONP] [CON) 

Sent: , Wftrinft.srlfiv. lannarv ZL ?.MQ 9:11 AM 

To: I |DS) (FBI) b< 

Subject: hw: Hre-puD DooK 

SfeNSffiVE BUT UNCLASSIFIED 
NON-RECORD - 

b6 -2 


I got ahold of l I to see if she had any more insight. If my understanding is correct since you're the ! | you are the 
POC she is referring to. Do you want to meet again to go over the book? Should I bring in some word or pdf files? it's easy 
to see from the stacks of paper in your office you're really busy. Thanks for taking the time to help me figure out how to 
handle this. 

-Jon 


From: 

Sent: 

To: 

Subject: 


_|RMD) (FBI) 

Monday, Jan uary 25. 2 010 11:34 AM 
ELLCH, JON F |(CON) 

RE: Pre-pub dooK 


SEftSfflggBUT UNCLASSIFIED 

non-recoRd 


b6 -2 


Hi Jon, 

Yes, contractors are required to go through the prepublication review process. I generally ask for the POC of the contract 
that you are working under or have you to sent it to that POC for review. The POC reviews it for classified, proprietary 
information or such information. The POC will then send me an email with their conclusions. I also would like a copy of 
the book for my records. If you need anything else, please email or call me. 


Thankwnn 


Prepublication Review Office 
Records Management Division 
170 Marcel Drive, Room 0-03 
Winchester, VA 22602-4843 
540-868-1697 


b6 -2 


From: ELLCH, JON P. | |( CON) 

Sent: Monday, January 2 5. 2010 10:43 AM 

To: I irRMOUFRI) 

Cc: I I fOS) (FBO b6 -2 

Subject: FW: Pre-pub book 

SBWSttLVE BUT UNCLASSIFIED 
NON-RECORD 


><=□ 


b6 -2 
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• # 

I've been trying to wo rk through this on my end. It seems that not a lot of people have been through this before over here. 

I K below) is my | | She has inquired up the chain around here. There seems to be confusion on two issues. b6 -2 

One is whether or not contractors are required to go through the process (I obviously think so), and whether PRO (which is 
you, right?) requires a copy of the content for review. 


I’m hoping you can clear a few things up. I've CC'd ou 


on this email. 


b6 -2 


Thank you for you help. 
-Jon 


From: 

Sent: 

To: 

Subject: 




Monday, January ?S, P010 10:16 AM 
ELLCH, JON P. | 

FW: Pre-pub booK" 


(FBI) 


[(CON) 


SENSITIVE BUT UNCLASSIFIED 
non^REcord 


b6 -2 


As discussed. Please let me know what you find out. 


From: 

Sent: 

To: 

Cc: 

Subject: 


I 


>D) (FBI) 


Tuasrlav. January IQ. 7010 1 :37 PM 

IQS! (FBif 

-1(05) (FBI) j 


RE: Pre-pub book 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


wrrm 


l(OS) (FBI) 


b6 -2 


b6 -2 


b6 -2 


I've heard basically the same as whaf | | has explained, but she has done one better in that she has provided POC*>6 -2 
to work through. But I don't know how much/little it might affect a contractor who works for the FBI. I've heard 
that these are the ropes a current or former FBI employee must go through to be (pre)approved in writing a book 
that might reference a facet of the FBI. I wish I knew more on this account. But I don't. Guess we'll have to 
research this further to find out more. 

I l b6 - 2 


From: 

Sent: 

To: 

Cc: 

Subject: 


luesday, January it?. 


TTTTT 


[(OS) (FBI) 
PM_ 


RE: Pre-pub book 


1 _[os) G 

](OS)(FBI){ 


ill 


l(FD) (FBI) 
](OS)(FBI) 


b6 -2 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Thank You l \ that is a wealth of information. Let me see what else ] h as to say--1 appreciate your feedback:) 


From: 

Sent: 

To: 

Cc: 

Subject: 


(OS) (FBI) 

Tuesday, January 19,2Q1Q Ifl 


RE: Pre-pub book 




3 1AM 
OS) (FBI) ;[ 


K FD) (FBI) 

JOS) (FBI) 
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m 

SENSffflEBUT UNCLASSIFIED 
NON-RECORD 



b6 -2 


I reached out to£ 


3/vho referred me to OPA^ 


said that most likely the Bureau 


b6 -2 


would want to review the draft publication to make sure no classified information was including in the writing because of 
the subject matter. He said sometimes Records Management does want to review and sometimes not, it depends on the 
subject. If required, a draft copy would need to be submitted to Reco rds Management, Information Dissemination Section, 
Publication Review Office. The RMD Directory has listed as the POC. Mr. Ellch might want to touch base 

with the PRO office to see if they have any time requirements tor reviewing material. If the PRO does require a review, b6 
you might want a copy of their approval/rejection for record. 


Thank you 

1 b6 -2 


From: 

Sent: 

To: 

m (fbi) 

Tuesday. January 19.2010 9:44 AM 

ITH) (FRn 



b6 -2 

Cc: 

P. _L. 

fas) (FBI)| 

los) (FBI)| 

t0S) (FBI) 



Subject: 1 FW! FfS-pUb B66k 


^BSffiVE BUT UNCLASSIFIED 
'TJON-RECORP 


Please read the email below in reference to an ROU/Harris employee making us aware that he is writing a book (actually, a 
sequel to a book previously written by him prior to his job at the FBI.) What if anything needs to be done other than keeping 
a copy for our records? 


From: ELLCH, JON P. | | (CON) 

Sent: Friday. January is. 2010 2:23 P M 

To: I ft >S) (FBI) 

Subject: Pre-pub book 

~5EM&flWE BUT UNCLASSIFIED 
'NON-RECORD' 


b6 -2 


H | | b6 -2 

here is that paragraph describing the updated book. 

The work under review is the second edition of "Hacking Exposed: Wireless" (McGraw Hill, 2007). 

The first edition was published before I started working with the bureau. The publisher has 
requested that myself and two co-authors work on the next edition. The next edition is largely a 
update of the previous work (newer tools, updated software, etc). It has some extra content 

relating to DECT and Bluetooth, none of which is related to any work I perform with Harris or the bureau, and was actually 
written by one of the co-authors. 

The book does cover commercially and freely available wireless security programs that I use while 
performing my job at the Bureau, but has no references to any FBI resources (programs, people, etc). 

Also the publisher obviously lists me as a employee of Harris Corp. 

If necessary I can provide the content in hardcopy or .doc/.pdf (whichever is most convenient). 

Thanks for the help, 

Jon Ellch 
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SEN§gErt/E BUT UNCLASSIFIED 

> N 

SENkflVE BUT UNCLASSIFIED 


SEfrSfljVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SEMSfifVE BUT UNCLASSIFIED 
SENSnWE BUT UNCLASSIFIED 
SEjtefnVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 

SENSITIVE BUT UNCLASSIFIED 

SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 

SENSITIVE BUT UNCLASSIFIED 
SEN&rtVE BUT UNCLASSIFIED 










From: 

Sent: 

To: 

Subject: 

Attachments: 


ELLCH, JON P. | ( CON) 
Monday Ffthrnarv ??, 7010 9:24 AM 
If RMD) (FBI) 

RE: Prepublication Review Office 

hew2.zip 


b6 -2 


UNCLASSIFIED 

NON-RECORD 


I 


b6 -2 


The content I wrote is attached. Unfortunately I wasn't able to include the screenshots because the attachment was to big. 
If you know an easy way to move 30mb files around F-net I could easily provide them. 

Also, just to be clear, none of the content explicitly deals with anything specific to my time at the bureau. It just covers 
technology that is used both inside and outside. 

Thanks for your help. 

-Jon 


hew2.zip (624 KB) 


From: | [RMD) (FBI) 

Sent: Wednesday. F ebruary 17, 2010 2:21 PM 

To: ELLCH, JON P. | I (CON) 

Subject: Prepublication Review Office 

UNCLASSIFIED 

NON-RECORD 


b6 -2 


Hi Jon, 


b6 -2 


I'm sorry for the delay. I received an email from|_|on February 5, 2010. Will you please send me the 

portion of your book, that deals with your time at the FBI. Please let me know when this is due. 


Thank you 


b6 -2 


Prepublication Review Office 
Records Management Division 
170 Marcel Drive, Room 0-03 
Winchester, VA 22602-4843 
540-868-1697 


UNCLASSIFIED 


UNCLASSIFIED 
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(RMD) (FBI) 


From: 

Sent: 

To: 

Subject: 


t RMD) (FBI) 

Wednesday. March 03, 2010 9:26 AM 


| (OTD) (FBI) 

RE: Pre-pub book - Jon Ellch manuscript 



b6 -2 


b6 -2 


SEWgmVE BUT UNCLASSIFIED 
NON-RECORD 


Hellcj_ 

I forwarded Mr. Ellch's manuscript per an earlier email. 


b6 -2 


I am the Coordinator of the Prepublication Review Office. My office's function is to review intended 
publications by current/former FBI employees to determine if the employee has included information obtained 
during FBI employment, which should not otherwise be released. Examples would be classified information, 
Rule 6e, sensitive techniques, pending investigations or prosecutions, personal privacy info, FBI information not 
available to the general public through means such as FOIPA, the media or court records, etc. 


As is more common than not, it is necessary that we call upon FBI "subject matter experts" to review the 
submissions of current/former FBI employees as the subject matter at issue is beyond the general expertise of 
my employees. 


Would you please have someone in your office review a manuscript that we received from Jon Ellch 
(Contractor) titled, "Building Your Wireless Toolkit." Please provide us your conclusions regarding the 
information in question. Should you have questions, please feel free to call or email me. 


General Rules-We have 30 business days to respond to the author. We would like to respond to the requester as 
soon as we can. Also, as the material is proprietary information, it is not to be disclosed/shared beyond those 
persons involved in the review process 

You can forward me your comments by email. 


Thank 


you 


b6 -2 


From: 

Sent: 

To: 

Cc: 

Subject: 


z 




](OTD) (FBI) 
2010 8:5 9 AM 


[ 


J(OTD) (FBI)X 


S') tranr 


RE: Pre-pub book - Jon Ellch manuscript 


SENSITIVE BUT UNCLASSIFIED 
N<3N-RB€OR~D~ 



(OGC)(FBI) 


b6 -2 


Hi | I b6 -2 

We’ll be happy to review the material here. Can you send us a copy and let us know if there is some formal procedure we 
have to follow? 

Also, FYI, Jon has previously published manucripts on the subject dating from before his work with us and he is also 

l 


PREPUB-5278 












• & 

aware of the need to not divulge sensitive knowledge he gained through working with us, so we don't expect a problem. 
But we're happy to make sure that's the case. 


Let me know. _ 

1 b6 -2 


From: I I fOS) (FBI) b6 -2 

Sent: Wednesday, March 03 . 2010 8:51 AM 

To: I ~> TD) (FBn__ __. 

Cc: I f OTD) (FBI) | K OS) (FBI) J | (OGC)(FBI) 

Subject: FW: Pre-pub book - Jon Ellch manuscript _2 

Sfr^TIVE BUT UNCLASSIFIED 
NON-RECORD 


I I _ b6 - 2 

Please see the email below from RMD's l | who was reviewing Jon Ellch's manuscript. She needs to speak with 

a government TPOC to determine that there are not any sensitive law enforcement techniques used by STAO noted in the 
manuscript prepared by Jon. Since I am not a subject matter expert on this, I was hoping you could give her a call to 
respond to her questions and to assist with getting this approved/resolved for Jon so that he can get his manuscript turned 
in/published. 

Please let me know if you are not able to respon d to her and if so, who you recommend we forward her question (below) to 

and/or any resolution you get wit H I 

Regards- 

I I b6 -2 


From: I | (RMD) (FBI) 

Sent: Wednesday. March 03. 2010 8:10 AM 

To: I l (OS) (FBI) 

Subject: RE: Pre-pub book - Jon Ellch manuscript 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Good mornin g! I j. 

The Prepublication Review Office (RMD) has reviewed Mr. Eilch's manuscript titled, "Building Your Wireless Toolkit," and 
the manuscript has been determined to be unclassified. We need to be advised, does this manuscript compromise 
sensitive law enforcement techniques that are used by your division? Please give me a call so we can discuss this. 



Prepublication Review Office 
Records Management Division 
170 Marcel Drive, Room 0-03 
Winchester, VA 22602-4843 
540-868-1697 


From: 

Sent: 

To: 

Cc: 

Subject: 


I 


](Osj (FBI) 


Friday, February 05 , 2010 11:50 AM 

I ' "IfRM P) (fed- 

fiith. ion pj rrnml 

| |(OGC)(FBI)l 


Tosi fFBI bf 


FW: Pre-pub book 


If 


FD) (FBI) 


](OS) (FBI){ 


b6 -2 


Jos) (FBI); 
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SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 




□ 

Plea se see the email below from STAO's Legal Counsell 
boo H | Jon Ellch is trying to get reviewed by the FBI and then published 


]with reference to the b6 
Per the 


-2 


bn 


direction of my Unit Chief and our Legal Counsel it has been determined that we are not qualified to 
review the book for classified or proprietary information and believe your division is the corfer.t nlaqe 
for this to occur. Please let me know if you need anything additional from either myself (th 
Jon Ellch's contract) or anyone from my office where Jon is employed. 

Thanks- 

I I be -2 


t 


From: 

Sent: 

To: 

Cc: 

Subject: 


_(OGC)(FBI) 

Thursday. February 04. 2010 4:55 PM 


RE: Pre-pub book 


](0S) (FBljj 


j'Lsumi 


SENSgjVE'BUT UNCLASSIFIED 

nDn-recor'd' 


](OS) (FBI){ 


](0S) (FBI) 


b6 -2 


b6 -2 


This is not an ar ea that I am familiar with, however I was able to find a "Prepublication Review Manual" from 
2005 on FBINet 


Jvhich seems pretty 


thorough. I note that I did not see anything in there about POC of the contract (not exactly sure who that is) 
reviewing the proposed publication "for classified, proprietary information or such information." 


b7E -4 


I note the following language, however; 


2. RMD Processes Review Request 

RMD will conduct the prepublication review, answer questions from employees about the 
prepublication review process, and review and process all requests as follows: 

2.1.1. If RMD concludes that no review is required, it will inform the employee in 
writing. 

2.1.2. If RMD concludes that review is required, it will conduct the review. 

2.1.3. RMD may consult or coordinate with any person who can assist in determining 
how to proceed with the prepublication review process. This may include 

seeking help to assess the content or potential impact of the proposed disclosure 
or to initiate appropriate responses to the proposed disclosure. 

Example: RMD may provide a copy of a proposed disclosure to FBI employees with 
specialized knowledge in order to assess whether the disclosure contains classified 
information. 

2.1.4. RMD may apprise appropriate FBI management officials of impending 


I am not qualified to make a determination of whether material is classified, proprietary or such information. I 
think that a subject matter expert in the technical field and a classification expert need to address those issues, 
see the example in the Manual in the above quoted section. 


I think that there needs to be further discussion with| 
for classified or proprietary information. 


b6 -2 

to clarify who is qualified to review the book 
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I hope this helps. Please let me know if you have any additional questions. 




Please read the email below. Can you provide assistance to Mr. Ellch with reference to his book? 
Thanks- 


b6 -2 



NON-RECORD 


Yes, |_please refer this tcj_|as you should not know the legal issues with regards to this. 

Thank you 


b6 -2 


b6 -2 



Please read the email below. Do we have a classification authority (here at STAO) that could do this? I. don't think this is 
something I have been trained nor should I be expected to know how to do. 

Do you think | "[ our attorney/advisor) could do it or possibly someone else? 

Please let me know. 



b6 -2 


b6 -2 


b6 -2 


From: 

ELLCH, JON P. 

(CON) 


Sent: 

, Wednesday. January 

F27. m 0 9:11 AM 


To: 

1 

fos) (FBI) 

b6 -2 

Subject: 

FW: Pre-pub book 
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m m 

SENSIXIVE-BUT UNCLASSIFIED 
NON-RECORD~ 


b6 -2 


I got ahold oi l | to see if she had any more insight. If my understanding is correct since you’re the | |y ou are the 
POC she is referring to. Do you want to meet again to go over the book? Should I bring in some word or pdf files? It's easy 
to see from the stacks of paper in your office you’re really busy. Thanks for taking the time to help me figure out how to 
handle this. 

-Jon 


From: 


_|CRMD) (FBI) 

b6 -2 

Sent: 

Monday, Janus 

irv pmn ii:^4 AM 


To: 

ELLCH, JON P. 

I (CON) 


Subject: 

re: Pre-pub book 



SEN^FFKfE BUT UNCLASSIFIED 
NOti-RECORD 


Hi Jon, 

Yes, contractors are required to go through the prepublication review process. I generally ask for the POC of the contract 
that you are working under or have you to sent it to that POC for review. The POC reviews it for classified, proprietary 
information or such information. The POC will then send me an email with their conclusions. I also would like a copy of 
the book for my records. If you need anything else, please email or call me. 

Thank you_ 

b6 -2 

Prepublication Review Office 
Records Management Division 
170 Marcel Drive, Room 0-03 
Winchester, VA 22602-4843 
540-868-1697 


From: 

Sent: 

To: 

Cc: 

Subject: 


ELLCH, JON P j I (CONI 


Monday. January 2 5 , 2010 10:43 AM 
"RMD1 fFBtt 

](OS) (FBI) 


FW: Pre-pub book 


SENjStEfttE^BUT UNCLASSIFIED 
NOfJ-RECORD~ 


b6 -2 


Hi | I 

I've been trying to wo rk through this on my end. It seems that not a lot of people have been through this before over here. b6 ~ 2 
I [ below) is mv l l She has inquired up the chain around here. There seems to be confusion on two issues. 

One is whether or not contractors are required to go through the process (I obviously think so), and whether PRO (which is 
you, right?) requires a copy of the content for review. 


I'm hoping you can clear a few things up. I've CC'd ouH 


on this email. 


b6 -2 


Thank you for you help. 
-Jon 


From: 



b6 -2 
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# • 

Sent: Monday, JaniaDL2L2010 10:16 AM 

To: ELLCH,JONF| [(CON) b6 " 2 

Subject: FW: Pre-pub do5T< 

SENSfflVE BUT UNCLASSIFIED 
NON-RECORD 


As discussed. Please let me know what you find out. 


From: 

Sent: 

To: 

Cc: 

Subject: 


]CFDj (FBI) 


Tuesday. January 19. 2010 1:37 PM 


5 


RE: Pre-pub book 


J(OS) (FBI);[ 


OS') rFBnf 


SEBSfflgE BUT UNCLASSIFIED 
NON-RECORD 


. KOS) (FBI) 

J(OS) (FBI) 


b6 -2 


b6 -2 


I’ve heard basically the same as what l I has explained, but she has done one better in that she has provided POCs 
to work through. But I don’t know how much/little it might affect a contractor who works for the FBI. I’ve heard 
that these are the ropes a current or former FBI employee must go through to be (pre)approved in writing a book b6 " 2 
that might reference a facet of the FBI. I wish I knew more on this account. But I don’t. Guess we’ll have to 
research this further to find out. more. 


b6 -2 


From: 

Sent: 

To: 

Cc: 

Subject: 


l (OS) (FBI) 

Tuesday. January 19. 20i n iTTfi PM _ 

J(osi fFRnr 


RE: Pre-pub book 


W (OS)p 
(FBI)[ 


SgRSffTVE BUT UNCLASSIFIED 
NON-RECORD 


, ](FD) (FBI) 

J0S)(FBI) 


b6 -2 


Thank You | [ - that is a wealth of information. Let me see what else l | has to say--1 appreciate your feedback:) 


From: 

Sent: 

To: 

Cc: 

Subject: 


f 


los) (FBI) 


Tuesday. January 19. 2010 10:11 AM 



fOS) (FBIlJ 

tos) (FBI); 



RE: Pre-pub book 


, K FP) (FBI) 

](OS) (FBI) 


b6 -2 
b6 -2 


Sensitive but unclassified 

NON-RECORD 


I-1 _ 

I reached out to | | who referred me to OPA I I said that most likely the Bureau 

would want to review the draft publication to make sure no classified information was including in the writing because of 
the subject matter. He said sometimes Records Management does want to review and sometimes not, it depends on the 
subject. If required, a draft copy would need to be submitted to Reco rds Management, Information Dissemination Section, 
Publication Review Office. The RMD Directory has l l listed as the POC. Mr. Ellch might want to touch base 

with the PRO office to see if they have any time requirements for reviewing material. If the PRO does require a review, 
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you might want a copy of their approval/rejection for record. 


Thank you 

n 



b6 -2 


From: I I fOSJ (FBI) b6 -2 

Sent: Tuesday. January 19. 2010 9:44 AM 

To: L IJ(FD) (FED-- --- 

Cc: I l (OS) (FBI); | | (OS) (FBI) j | (OS) (FBI) 

Subject: FW: Pre-pub book 

^EftSffjV^BUT UNCLASSIFIED 
NON-RECORD 


Please read the email below in reference to an ROU/Harris employee making us aware that he is writing a book (actually, a 
sequel to a book previously written by him prior to his job at the FBI.) What if anything needs to be done other than keeping 
a copy for our records? 


From: 

Sent: 

To: 

Subject: 


ellch, jon p Icon) 

Friday. January 15. 2010 2:23 PM 
I t OS) (FBI) 

Pre-pub book 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD - 


b6 -2 


here is that paragraph describing the updated book. 

The work under review is the second edition of "Hacking Exposed: Wireless" (McGraw Hill, 2007). 

The first edition was published before I started working with the bureau. The publisher has 
requested that myself and two co-authors work on the next edition. The next edition is largely a 
update of the previous work (newer tools, updated software, etc). It has some extra content 

relating to DECT and Bluetooth, none of which is related to any work I perform with Harris or the bureau, and was actually 
written by one of the co-authors. 

The book does cover commercially and freely available wireless security programs that I use while 
performing my job at the Bureau, but has no references to any FBI resources (programs, people, etc). 

Also the publisher obviously lists me as a employee of Harris Corp. 

If necessary I can provide the content in hardcopy or .doc/.pdf (whichever is most convenient). 

Thanks for the help, 

Jon Ellch 


SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SEftSftiVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
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SEMgmVE BUT UNCLASSIFIED 
SEfrsCfivE BUT UNCLASSIFIED 


SE^tSfttVE BUT UNCLASSIFIED 
SENSfffi/E BUT UNCLASSIFIED 
SEjftSgft/E BUT UNCLASSIFIED 
SEtfelTtVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 

' /X 

SENSITIVE BUT UNCLASSIFIED 
SEN&TlVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED 
SEjfefflVCBUT UNCLASSIFIED 
SENSTOV^ BUT UNCLASSIFIED 
SENStBVE BUT UNCLASSIFIED 










b6 -2 


(RMD) (FBI) 


From: 

Sent: 

To: 

Subject: 


_|(RMD) (FBI) 

Monday. March 22. 2010 1:15 PM 
| (OTD) (FBI) 

RE: Pre-pub book - Jon Ellch manuscript 


be -2 


SERSfflgEBUT UNCLASSIFIED 
NON-RECORD 


b6 -2 


Thank you for your assistance. 
Rega rds 


b6 -2 


From: | |(OTD) (FBI) 

Sent: Mon a ay,-March, 22 , zQiO. i:il PM 

To: I I f RMD) (FBI) 

Subject: RE: Pre-pub book - Jon Ellch manuscript 

SEMSmyEBUT UNCLASSIFIED 
NON-RECORD 


Hi | | b6 -2 

I I've finally been able to review Jon's manuscript. From my review, I do not believe that it contains any information gained 
during his employment with the FBI that should not be released and seems to consist solely of open source information. 

Please let me know if you require anything further. 

I'll let Jon know that I have responded to you. 

. Thanks. 

I be -2 


From: 

Sent: 

To: 

Subject: 


(RMD) (FBI) 


Wsiinssriav. March Q3, 2010 9:26 AM 
I | (OTD) (FBI) 

RE: Pre-pub book - Ion Ellch manuscript 


SEftSfHVE BUT UNCLASSIFIED 
NON-RECORD 


b6 -2 


Second. tC/ V 

ff AfacftXtoj dFiCpos-td? ; ft/f'jCscless 


Hell d I b6 -2 

I forwarded Mr. Ellch's manuscript per an earlier email. 

I am the Coordinator of the Prepublication Review Office. My office's function is to review intended 
publications by current/former FBI employees to determine if the employee has included information obtained 
during FBI employment, which should not otherwise be released. Examples would be classified information, 

Rule 6e, sensitive techniques, pending investigations or prosecutions, personal privacy info, FBI information not 
available to the general public through means such as FOIPA, the media or court records, etc. 


l 
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As is more common than not, it is necessary that we call upon FBI "subject matter experts" to review the 
submissions of current/former FBI employees as the subject matter at issue is beyond the general expertise of 
my employees. 


Would you please have someone in your office review a manuscript that we received from Jon Ellch 
(Contractor) titled, "Building Your Wireless Toolkit." Please provide us your conclusions regarding the 
information in question. Should you have questions, please feel free to call or email me. 


General Rules-We have 30 business days to respond to the author. We would like to respond to the requester as 
soon as we can. Also, as the material is proprietary information, it is not to be disclosed/shared beyond those 
persons involved in the review process 

You can forward me your comments by email. 

Than 


f 


you 


b6 -2 


From: 

Sent: 

1 |(OTD) (FBI) 

Wednesday. March OS. 2010 fl-TO AM 



To: 

1 . IfOSI (FBni 

IfRMDl CFBI1 


Cc: 

1 KOTO) (FBI);| 

l(OS) (FBI)l 

| (OGC)(FBI) 

Subject: 

RE: Pre-pub book - Jon Ellch manuscript 




SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Hi | | b6 -2 

We'll be happy to review the material here. Can you send us a copy and let us know if there is some formal procedure we 
have to follow? 

Also, FYI, Jon has previously published manucripts on the subject dating from before his work with us and he is also 
aware of the need to not divulge sensitive knowledge he gained through working with us, so we don't expect a problem. 

But we’re happy to make sure that's the case. 


Let me know. 


b6 -2 


I fOS) (FBI) 

Wednesday. March 03. 2010 8:51 AM 

J OTD) (FBp-- r 

|tf)TD) (FBI) | | (OS) (FBI); [ 

FW! pre-pub 1566k -'jon Ellch manuscript- 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


From: 

Sent: 

To: 

Cc: 

Subject: 


] (OGC)(FBI) 


b€ - 


b6 -2 

Please see the email below from RMD's l | who was reviewing Jon Ellch's manuscript. She needs to speak with 

a government TPOC to determine that there are not any sensitive law enforcement techniques used by STAO noted in the 
manuscript prepared by Jon. Since I am not a subject matter expert on this, I was hoping you could give her a call to 
respond to her questions and to assist with getting this approved/resolved for Jon so that he can get his manuscript turned 
in/published. 

Please let me know if you are not able to respond to her and if so, who you recommend we forward her question (below) to 
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and/or any resolution 
Reaards- 


you get with 




b6 -2 


From: 

Sent: 

To: 

Subject: 


](RMD) (FBI) 

03. 2010 8:10 AM 

JOS) (FBI) 


[ 




RE: Pre-pub book - Jon Ellch manuscript 


BUT UNCLASSIFIED 
NON-RECORD 


b6 -2 


Good morning 


The Prepublication Review Office (RMD) has reviewed Mr. Ellch's manuscript titled, "Building Your Wireless Toolkit," and 
the manuscript has been determined to be unclassified. We need to be advised, does this manuscript compromise 
sensitive law enforcement techniques that are used by your division? Please give me a call so we can discuss this. 

Tharjk you 


I I b6 -2 

Prepublication Review Office 

Records Management Division 

170 Marcel Drive, Room 0-03 

Winchester, VA 22602-4843 

540-868-1697 


From: 

Sent: 

To: 

Cc: 

Subject: 


](OS) (FBI) 


b6 -2 


ELLCH. JON I 


[ 


FW: Pre-pub book 


MD) (FED- 

ICON)] 

tOS) (FBI)| 

l(OS) (FBI)] 

(OS) (FBI); 

□(OGCXFBI)] 

l(FD) (FBI) 




b6 


SElvESfflffE BUT UNCLASSIFIED 
NON-RECORD 


Ple ase see the email below from STAO's Legal Counsel|_|with reference to the 

bool j [ )on Ellch is trying to get reviewed by the FBI and then published. Per the b6 " 2 


direction of my Unit Chief and our Legal Counsel it has been determined that we are not qualified to 
review the book for classified or proprietary information and believe your division is the correct place 
for this to occur. Please let me know if you need anything additional from either myself (the COTR on 
Jon Ellch's contract) or anyone from my office where Jon is employed. 

Thanks- 


b6 -2 


From: | | (OGC)(FBI) 

Sent: j inursaav. February 0472010 4j 55 PM 

Cc: 1 IfOSWFBn r I (OS) (FBI) ] K OS) (FBI) 

Subject: RE: Pre-pub book 

SENSRECTE BUT UNCLASSIFIED 
NON-RECORD 
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b6 -2 


This is not an ar ea that I am familiar with, however I was able to find a "Prepublication Review Manual" from 

2005 on FBINet_which seems pretty b7E -4 

thorough. I note that I did not see anything in there about POC of the contract (not exactly sure who that is) 
reviewing the proposed publication "for classified, proprietary information or such information." 


I note the following language, however; 

2. RMD Processes Review Request 

RMD will conduct the prepublication review, answer questions from employees about the 
prepublication review process, and review and process all requests as follows: 

2.1.1. If RMD concludes that no review is required, it will inform the employee in 
writing. 

2.1.2. If RMD concludes that review is required, it will conduct the review. 

2.1.3. RMD may consult or coordinate with any person who can assist in determining 
how to proceed with the prepublication review process. This may include 

seeking help to assess the content or potential impact of the proposed disclosure 
or to initiate appropriate responses to the proposed disclosure. 

Example: RMD may provide a copy of a proposed disclosure to FBI employees with 
specialized knowledge in order to assess whether the disclosure contains classified 
information. 

2.1.4. RMD may apprise appropriate FBI management officials of impending 


I am not qualified to make a determination of whether material is classified, proprietary or such information. I 
think that a subject matter expert in the technical field and a classification expert need to address those issues, 
see the example in the Manual in the above quoted section. 


I think that there needs to be further discussion with] 
for classified or proprietary information. 


b6 

to clarify who is qualified to review the book 


-2 


I hope this helps. Please let me know if you have any additional questions. 


b6 -2 


From: 

Sent: 

To: 

Cc: 

Subject: 


I k OS) (FBI) 

Friday. January 29. 2010 11:44 AM 

I (OGC)(FED_ 

l (OS) (FBI) j 

FW: Pre-pub book 


(OS) (FBI);[ 


](OS) (FBI) 


b6 -2 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


_| b6 -2 

Please read the email below. Can you provide assistance to Mr. Ellch with reference to his book? 

Thanks- 


From: 


I K OS) (FBI) 


b6 -2 
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Sent: 

To: 

Subject: 


b6 -2 


♦ • 

Friday. January 29. 2010 11:37 AM 

I l (OS) (FBI) 

he: Pre-pub door 

SENSfftttE BUT UNCLASSIFIED 
NON-RECORD 


Yes, 


please refer this to 


as you should not know the legal issues with regards to this. 


Thank you 


b6 -2 


[ 


b6 -2 


From: 

Sent: 

To: 

Cc: 

Subject: 


I 


Friday, Januan/ 29, 20 10 11:34 AM 
I ' ] (OS) (FBI) 

ELLCH, JON P | | (CON)^ 

FW: Pre-pub book 


(OS) (FBI) 


JOS) (FBI) 


(OS) (FBI)_ 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


b6 -2 


|_| b6 -2 

Please read the email below. Do we have a classification authority (here at STAO) that could do this? I don't think this is 
something I have bee n trained nor should I be expected to know how to do. 

Do you think ! l (our attorney/advisor) could do it or possibly someone else? 

Please let me know. 

Thanks- 

I b6 -2 


From: 

Sent: 

To: 

Subject: 


ELLCH, JON P (CON) 

. Wednesday , jknud i v fr7 . 7010 . 9 :11 AM 

l(OS) (FBI) 

FW: Pre-pub book 


SEN^fflyj^BUT UNCLASSIFIED 
NON-RECORD 


b6 -2 


qot ah 


Hi | | 

I got ahold of | [ to see if she had any more insight. If my understanding is correct since you're the | l you are the 
POC she is referring to. Do you want to meet again to go over the book? Should l bring in some word or pdf files? It's easy 
to see from the stacks of paper in your office you're really busy. Thanks for taking the time to help me figure out how to 
handle this. 

-Jon 


b6 -2 


From: 

Sent: 

To: 

Subject: 


I fRMD) (FBI) 

Monday. Janu ary 25. 2 010 11:34 AM 
ELLCH, JON P TCON) 

RE: Pre-pub bCOK- r 


SENStaayi but unclassified 

NON-RECORD" 


b6 -2 


Hi Jon, 

Yes, contractors are required to go through the prepublication review process. I generally ask for the POC of the contract 
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that you are working under or have you to sent it to that POC for review. The POC reviews it for classified, proprietary 
information or such information. The POC will then send me an email with their conclusions. I also would like a copy of 
the book for my records. If you need anything else, please email or call me. 


Thank vnti 


Prepublication Review Office 
Records Management Division 
170 Marcel Drive, Room 0-03 
Winchester, VA 22602-4843 
540-868-1697 


b6 -2 


From: 

Sent: 

To: 

Cc: 

Subject: 


ELLCH, JON P, , 
Monday, January 25 . 


(CON) 


FW: Pre-pub book 


2010 10:43 AM 
IrRMnVrFRn 

-□(OS) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


b6 -2 


h|I 

I've been trying to work thrnnnh this on my end. It seems that not a lot of people have been through this before over here. 

I below) is m|_|She has inquired up the chain around here. There seems to be confusion on two issues. ] 

une is whether or not contractors are required to go through the process (I obviously think so), and whether PRO (which is 
you, right?) requires a copy of the content for review. 


I'm hoping you can clear a few things up. I've CC'd ou 


on this email. 


b6 -2 


Thank you for you help. 
-Jon 


From: | | (OS) (FBI) b6 -2 

Sent: Monday, Januaix2JL2010 10:16 AM 

To: ELLCH, JON P.| (CON) 

Subject: FW: Pre-pub boUK- r 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


As discussed. Please let me know what you find out. 


From: 

Sent: 

To: 

Cc: 

Subject: 


_(FD) (FBI) 

mesaav. January m. Join 1:37 PM 


RE: Pre-pub book 


JOS) (FBI); 


IQS) (FBI)f 


SENSfiWE^BUT UNCLASSIFIED 
NON-RECORD 


I QS) (FBI) 

pS) (FBI) 


b6 -2 


b6 -2 


I've heard basically the same as whal l l ias explained, but she has done one better in that she has provided POCs 
to work through. But I don't know how much/little it might affect a contractor who works for the FBI. I’ve heard 
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» 




that these are the ropes a current or former FBI employee must go through to be (pre)approved in writing a book 
that might reference a facet of the FBI. I wish I knew more on this account. But I don't. Guess we'll have to 
research this further to find out more. 


b6 -2 


From: 

Sent: 

To: 

Cc: 

Subject: 


TiiPgftav 1aniiar\/1Q 


_|(OS) (FBI) 

2M0 1:16 PN 


Kt: Hre-puD dook 


|(OS) 
(OS) (FBI 


c 


1 


CD 

josKi 


(FD) (FBI) 
(FBI) 


SENsfrivE BUT UNCLASSIFIED 
NON-RECORD 


b6 -2 


Thank You | I - that is a wealth of information. Let me see what else | | has to say--1 appreciate your feedback:) 


From: 


I 


|(0S) (FBI) 


To: 


\(nn fFRnl_ 


Cc: 

Subject: 

k0S) (FBI); 

RE: Pre-pub book 


fros) (FBI) 


(FD) (FBI) 


SBTSmVE BUT UNCLASSIFIED 
NON-RECORD 


b6 -2 


b6 -2 


I reached out to 


Jwho referred me to OPa£ 


said that most likely the Bureau 


b6 


would want to review the draft publication to make sure no classified information was including in the writing because of 
the subject matter. He said sometimes Records Management does want to review and sometimes not, it depends on the 
subject. If required, a draft copy would need to hfi. snhmitted to Rflnp rris Management, Information Dissemination Section, 


Publication Review Office. The RMD Directory ha: 


I 


listed as the POC. Mr. Ellch might want to touch base 


with the PRO office to see if they have any time requirements for reviewing material. If the PRO does require a review, 
you might want a copy of their approval/rejection for record. 


Thank you 

I b6 -2 


From: j_ 

(OS) (FBI) 


Sent: 

Tuesdav. Januarv 19. 2010 9:44 AM 


To: 

_|rm rFRn 


Cc: 

Subject: 

Kos) m)\ 

(OS) (FBI);[ 

rvv: Kre-puo dook 



>S) (FBI) 


b6 -2 


SENSITIVE but unclassified 
NON-RECORD 


Please read the email below in reference to an ROU/Harris employee making us aware that he is writing a book (actually, a 
sequel to a book previously written by him prior to his job at the FBI.) What if anything needs to be done other than keeping 
a copy for our records? 


From: 

Sent: 

To: 


ELLCH, JON P. (CON) 

Friday. January 1 13. zJlO 2:23 PM 

| (OS) (FBI) 


b6 -2 
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Subject: 


Pre-pub book 


^EttSffftCE'BUT UNCLASSIFIED 
NON-RECORD 


Hi l I b6 

here is that paragraph describing the updated book. 

The work under review is the second edition of "Hacking Exposed: Wireless" (McGraw Hill, 2007). 

The first edition was published before I started working with the bureau. The publisher has 
requested that myself and two co-authors work on the next edition. The next edition is largely a 
update of the previous work (newer tools, updated software, etc). It has some extra content 

relating to DECT and Bluetooth, none of which is related to any work I perform with Harris or the bureau, and was actually 
written by one of the co-authors. 

The book does cover commercially and freely available wireless security programs that I use while 
performing my job at the Bureau, but has no references to any FBI resources (programs, people, etc). 

Also the publisher obviously lists me as a employee of Harris Corp. 

If necessary I can provide the content in hardcopy or .doc/.pdf (whichever is most convenient). 

Thanks for the help, 

Jon Ellch 


SE^StjWE BUT UNCLASSIFIED 
—^^-: :- 


SEN&tiWE BUT UNCLASSIFIED 

SENSlWE BUT UNCLASSIFIED 
- 7 \ - 


SEN 


ENSfflV^B 


BUT UNCLASSIFIED 


SEhlSlTiy^BUT 


UNCLASSIFIED 


SENSEECTE BUT UNCLASSIFIED 
SEftSKrtfE BUT UNCLASSIFIED 
SEN&TiyE BUT UNCLASSIFIED 
SENSEEgfEBUT UNCLASSIFIED 


SBfotiWE BUT UNCLASSIFIED 


SENStiWE BUT UNCLASSIFIED 


SEftSOlVE BUT UNCLASSIFIED 
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